Re: BIND 9.5.1-P3 compilation problems.
Mark - Thanks for your notes. I will attempt to find a window to update the system patch level. This is especially frustration because I performed the upgrade on a disaster recovery system last week and it worked flawlessly. Hopefully patching the system will get us there. If so, I'll be sure to update the listserver, for the benefit of another poor soul in the same boat. :-) Thanks again! Emery. Mark Andrews wrote: In message <4a820186.20...@gmail.com>, Emery writes: This is a multi-part message in MIME format. --000608010205070908020408 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Mark, I am not really sure which error is the actual indicator of the aforementioned problem. I've attached the config.log. Your insight is most welcome! This looks like a broken . The "checking for ANSI C header files" also failed earlier in the build process. This could be because Sun's header files are broken or it could be gcc's "fixes" arn't correct. I suspect that there is a typedef for ctid_t not being made when -D_XPG4_2 -D__EXTENSIONS__ are set on the command line. I would make sure that your OS is fully patched then re-run "fixincludes", if I remember the command name correctly, from the gcc distribution. Mark configure:6112: gcc -o conftest -g -O2 -I/usr/local/ssl/include -D_XPG4_2 -D__E XTENSIONS__ conftest.c -L/usr/local/ssl/lib -R/usr/local/ssl/lib -lcrypto >&5 In file included from /usr/include/sys/wait.h:24, from /usr/include/stdlib.h:22, from /usr/local/ssl/include/openssl/err.h:66, from conftest.c:27: /usr/include/sys/siginfo.h:259: error: syntax error before "ctid_t" /usr/include/sys/siginfo.h:292: error: syntax error before '}' token /usr/include/sys/siginfo.h:294: error: syntax error before '}' token /usr/include/sys/siginfo.h:390: error: syntax error before "ctid_t" /usr/include/sys/siginfo.h:398: error: conflicting types for '__fault' /usr/include/sys/siginfo.h:267: error: previous declaration of '__fault' was her e /usr/include/sys/siginfo.h:404: error: conflicting types for '__file' /usr/include/sys/siginfo.h:273: error: previous declaration of '__file' was here /usr/include/sys/siginfo.h:420: error: conflicting types for '__prof' /usr/include/sys/siginfo.h:287: error: previous declaration of '__prof' was here /usr/include/sys/siginfo.h:424: error: conflicting types for '__rctl' /usr/include/sys/siginfo.h:291: error: previous declaration of '__rctl' was here /usr/include/sys/siginfo.h:426: error: syntax error before '}' token /usr/include/sys/siginfo.h:428: error: syntax error before '}' token /usr/include/sys/siginfo.h:432: error: syntax error before "k_siginfo_t" /usr/include/sys/siginfo.h:437: error: syntax error before '}' token In file included from /usr/include/sys/procset.h:24, from /usr/include/sys/wait.h:25, from /usr/include/stdlib.h:22, from /usr/local/ssl/include/openssl/err.h:66, from conftest.c:27: /usr/local/lib/gcc/sparc-sun-solaris2.9/3.4.6/include/sys/signal.h:96: error: sy ntax error before "siginfo_t" In file included from /usr/include/stdlib.h:22, from /usr/local/ssl/include/openssl/err.h:66, from conftest.c:27: /usr/include/sys/wait.h:86: error: syntax error before "siginfo_t" ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.5.1-P3 compilation problems.
In message <4a820186.20...@gmail.com>, Emery writes: > This is a multi-part message in MIME format. > --000608010205070908020408 > Content-Type: text/plain; charset=ISO-8859-1; format=flowed > Content-Transfer-Encoding: 7bit > > > Mark, > > I am not really sure which error is the actual indicator of the > aforementioned problem. I've attached the config.log. Your insight is > most welcome! This looks like a broken . The "checking for ANSI C header files" also failed earlier in the build process. This could be because Sun's header files are broken or it could be gcc's "fixes" arn't correct. I suspect that there is a typedef for ctid_t not being made when -D_XPG4_2 -D__EXTENSIONS__ are set on the command line. I would make sure that your OS is fully patched then re-run "fixincludes", if I remember the command name correctly, from the gcc distribution. Mark configure:6112: gcc -o conftest -g -O2 -I/usr/local/ssl/include -D_XPG4_2 -D__E XTENSIONS__ conftest.c -L/usr/local/ssl/lib -R/usr/local/ssl/lib -lcrypto >&5 In file included from /usr/include/sys/wait.h:24, from /usr/include/stdlib.h:22, from /usr/local/ssl/include/openssl/err.h:66, from conftest.c:27: /usr/include/sys/siginfo.h:259: error: syntax error before "ctid_t" /usr/include/sys/siginfo.h:292: error: syntax error before '}' token /usr/include/sys/siginfo.h:294: error: syntax error before '}' token /usr/include/sys/siginfo.h:390: error: syntax error before "ctid_t" /usr/include/sys/siginfo.h:398: error: conflicting types for '__fault' /usr/include/sys/siginfo.h:267: error: previous declaration of '__fault' was her e /usr/include/sys/siginfo.h:404: error: conflicting types for '__file' /usr/include/sys/siginfo.h:273: error: previous declaration of '__file' was here /usr/include/sys/siginfo.h:420: error: conflicting types for '__prof' /usr/include/sys/siginfo.h:287: error: previous declaration of '__prof' was here /usr/include/sys/siginfo.h:424: error: conflicting types for '__rctl' /usr/include/sys/siginfo.h:291: error: previous declaration of '__rctl' was here /usr/include/sys/siginfo.h:426: error: syntax error before '}' token /usr/include/sys/siginfo.h:428: error: syntax error before '}' token /usr/include/sys/siginfo.h:432: error: syntax error before "k_siginfo_t" /usr/include/sys/siginfo.h:437: error: syntax error before '}' token In file included from /usr/include/sys/procset.h:24, from /usr/include/sys/wait.h:25, from /usr/include/stdlib.h:22, from /usr/local/ssl/include/openssl/err.h:66, from conftest.c:27: /usr/local/lib/gcc/sparc-sun-solaris2.9/3.4.6/include/sys/signal.h:96: error: sy ntax error before "siginfo_t" In file included from /usr/include/stdlib.h:22, from /usr/local/ssl/include/openssl/err.h:66, from conftest.c:27: /usr/include/sys/wait.h:86: error: syntax error before "siginfo_t" -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.5.1-P3 compilation problems.
In message <4a8155df.8010...@gmail.com>, Emery writes: > Good morning, > > I've conducted two maintenance windows to upgrade our BIND primary > server to the new code to address the recent security vulnerability, but > cannot get past the error below. One can compile and test named at anytime. Only the installation need to be done in a maintenance window. > I have Openssl 9.8.0k installed. I have > no problems running tests from the openssl prompt. I have tried > exporting the LD_LIBRARY_PATH to include the /usr/local/ssl directory > and have run the compilation with the --with-openssl=/usr/local/ssl > switch to no avail. > > I am running Solaris 10 Sparc - > > I know that there is a precompiled version of this BIND release on > Sunfreeware, but I am trying to upgrade our primary nameserver and would > rather to this than a clean uninstall/install. > > Is there any insight into what wall I'm running into? > > > checking for strings.h... yes > checking for inttypes.h... yes > checking for stdint.h... yes > checking for unistd.h... (cached) yes > checking for size_t... yes > checking for ssize_t... yes > checking for uintptr_t... yes > checking for socklen_t... yes > checking whether time.h and sys/time.h may both be included... yes > checking for long long... yes > checking for struct lifconf... no > checking for kqueue... no > checking epoll support... no > checking sys/devpoll.h usability... yes > checking sys/devpoll.h presence... yes > checking for sys/devpoll.h... yes > checking if unistd.h or sys/types.h defines fd_set... yes > checking whether byte ordering is bigendian... yes > checking for OpenSSL library... using OpenSSL from /usr/local/ssl/lib > and /usr/local/ssl/include > checking whether linking with OpenSSL works... no > configure: error: Could not run test program using OpenSSL from > /usr/local/ssl/lib and /usr/local/ssl/include. > Please check the argument to --with-openssl and your > shared library configuration (e.g., LD_LIBRARY_PATH). What is in config.log? ___ > bind-users mailing list > bind-users@lists.isc.org > https://lists.isc.org/mailman/listinfo/bind-users -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.5.1-P3 compilation problems.
Emery wrote: >I've conducted two maintenance windows to upgrade our BIND primary >server to the new code to address the recent security vulnerability, but >cannot get past the error below. I have Openssl 9.8.0k installed. I have >no problems running tests from the openssl prompt. I have tried >exporting the LD_LIBRARY_PATH to include the /usr/local/ssl directory >and have run the compilation with the --with-openssl=/usr/local/ssl >switch to no avail. > >I am running Solaris 10 Sparc - > >I know that there is a precompiled version of this BIND release on >Sunfreeware, but I am trying to upgrade our primary nameserver and would >rather to this than a clean uninstall/install. > >Is there any insight into what wall I'm running into? > > >checking for strings.h... yes >checking for inttypes.h... yes >checking for stdint.h... yes >checking for unistd.h... (cached) yes >checking for size_t... yes >checking for ssize_t... yes >checking for uintptr_t... yes >checking for socklen_t... yes >checking whether time.h and sys/time.h may both be included... yes >checking for long long... yes >checking for struct lifconf... no >checking for kqueue... no >checking epoll support... no >checking sys/devpoll.h usability... yes >checking sys/devpoll.h presence... yes >checking for sys/devpoll.h... yes >checking if unistd.h or sys/types.h defines fd_set... yes >checking whether byte ordering is bigendian... yes >checking for OpenSSL library... using OpenSSL from /usr/local/ssl/lib >and /usr/local/ssl/include >checking whether linking with OpenSSL works... no >configure: error: Could not run test program using OpenSSL from >/usr/local/ssl/lib and /usr/local/ssl/include. >Please check the argument to --with-openssl and your >shared library configuration (e.g., LD_LIBRARY_PATH). When I built BIND 9.6.1-P1 on Solaris 10 I used the following commands: unsetenv LD_LIBRARY_PATH set path=(/usr/sfw/bin/ /usr/sbin /usr/bin /usr/etc /usr/ccs/bin \ /usr/afsws/local/bin) ./configure --prefix=/export/home/named/bind \ --sysconfdir=/export/home/named --enable-threads --localstatedir=/var \ --with-gssapi=/usr --with-libxml2=/usr I am not sure what we have in /usr/afsws/local/bin (if anything) that I need. After the build I ran strings /usr/sfw/lib/libcrypto.so.0.9.7 | grep SSL and I get, in part, OpenSSL 0.9.7d 17 Mar 2004 (+ security fixes for: CVE-2005-2969 CVE-2006-2937 CVE-2006-2940 CVE-2006-3738 CVE-2006-4339 CVE-2006-4343 CVE-2007-5135 CVE-2008-5077 CVE-2009-0590) I did this because I got a warning message about a back-level OpenSSL Crypto library. The file name has "0.9.7", but that file does contain fixes for vulnerabilities. This is on a SunOS ... 5.10 Generic_141414-02 sun4u sparc SUNW,Sun-Fire-V240 system. Note that I used different commands when building this BIND on a Solaris 9 system. -- Barry S. Finkel Computing and Information Systems Division Argonne National Laboratory Phone:+1 (630) 252-7277 9700 South Cass Avenue Facsimile:+1 (630) 252-4601 Building 222, Room D209 Internet: bsfin...@anl.gov Argonne, IL 60439-4828 IBMMAIL: I1004994 ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: BIND 9.5.1-P3 compilation problems.
Hello! If you don't need DNSSEC for your zones, you can compile bind without SSL support, like "./configure --with-openssl=no" On 11.08.2009 / 07:28:31 -0400, Emery wrote: > Good morning, > > I've conducted two maintenance windows to upgrade our BIND primary > server to the new code to address the recent security vulnerability, but > cannot get past the error below. I have Openssl 9.8.0k installed. I have > no problems running tests from the openssl prompt. I have tried > exporting the LD_LIBRARY_PATH to include the /usr/local/ssl directory > and have run the compilation with the --with-openssl=/usr/local/ssl > switch to no avail. > > I am running Solaris 10 Sparc - ___ bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users